Then restart MySQL. Even though previously the user could see the MySQL database names, they would not be able to access the actual databases unless they had access to them. This only obscures the database names from show databases, so the MySQL user can not see the database name that he/she doesn't have some kind of access to.